
$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier: KdFzXXl/4Owkr3KRGXcG8FrkZYeMPFXQF2avwzPNVa0=
Subject key identifier: EE:57:B6:FF:81:EF:E6:8B:8C:A2:4D:9F:63:8B:2F:E0:64:11:54:DC
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial: 1343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number: 1339
Signing time: Sat 28 Feb 2026 17:04:26 +0000
Manifest this update: Sat 28 Feb 2026 17:04:25 +0000
Manifest next update: Sat 07 Mar 2026 17:04:25 +0000
Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: yt5l8pfhbrp68+8Qj4ppvLT71rRNm/usMaLiB4m/0FI=)
2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: AtIY01QzRR0A54d2DL/Ntfs13u3zmiVedAjhi5vQD2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4931 (0x1343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Validity
Not Before: Feb 28 17:04:25 2026 GMT
Not After : Mar 7 17:04:25 2026 GMT
Subject: CN=69a32019-427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:e4:b2:a3:4d:92:b5:0e:5f:92:5d:8b:38:
63:f1:0e:82:05:3e:0b:07:48:f0:cf:9d:37:ac:93:
3c:a5:4b:8b:21:36:ce:0c:9c:7c:78:3c:0b:f4:49:
76:7e:3e:9d:b3:d5:42:98:14:7b:ef:c1:3f:1c:82:
74:ae:4f:86:aa:77:96:17:d3:b7:e3:87:1f:51:a3:
02:99:90:4d:10:0b:5c:1c:1c:1d:67:95:d3:e9:8c:
79:6b:bc:5d:fa:d3:0b:20:8a:fe:5e:b0:c0:50:f5:
07:84:28:60:89:d4:21:d1:d8:f6:21:86:1d:d9:ca:
48:7f:35:9f:cc:b1:fe:f2:ac:ba:bb:56:ce:1b:fe:
66:3b:30:6b:61:a2:69:8e:a4:de:5b:52:46:af:67:
fc:e3:0e:23:63:60:d2:b0:b4:8d:11:ec:e1:cb:71:
dd:3d:7a:dc:f7:4d:e0:5c:83:96:d4:65:2b:ef:98:
23:8b:56:0e:6f:5d:ec:ee:29:0c:f5:e6:40:53:f6:
de:71:91:c7:f8:ce:13:58:d0:2b:bd:5f:19:df:12:
a3:37:22:20:c7:35:d4:29:9b:19:43:af:7b:11:8b:
ec:c7:db:85:44:d9:af:7c:3a:24:8a:d6:76:93:18:
90:e8:6d:e8:d3:14:49:76:20:49:19:52:b5:0c:9a:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:B6:FF:81:EF:E6:8B:8C:A2:4D:9F:63:8B:2F:E0:64:11:54:DC
X509v3 Authority Key Identifier:
keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:96:8f:93:17:39:19:f7:e3:40:4e:a1:92:db:78:5f:bd:9a:
8f:20:38:15:ea:52:9c:41:81:bb:18:85:18:d9:b0:04:f3:ae:
56:29:56:64:1e:98:81:0a:c8:f7:fe:19:db:fa:f4:86:c0:d7:
3e:49:3f:f9:84:f2:fe:02:0a:9f:12:55:f1:41:2c:f6:32:4d:
92:49:d0:9d:e0:dc:9f:23:b4:a6:6e:7f:52:b2:dc:92:59:4d:
82:ad:91:fd:f4:f0:dc:65:76:fd:ed:67:98:2b:a8:81:05:1a:
e0:12:d1:22:64:28:ed:4e:65:f4:d2:73:67:95:9b:d7:3d:77:
73:2b:9e:0a:c8:c7:c2:a2:27:b4:24:95:78:e3:a1:c8:cf:eb:
06:1d:e0:54:be:8b:9a:28:00:6f:0a:64:55:f5:34:4f:f7:7e:
cb:dd:88:66:92:06:45:50:0c:d5:1c:22:12:3d:88:a6:14:79:
51:ad:6c:96:1c:72:07:a2:81:a3:05:cf:f8:ff:b9:96:ae:62:
60:70:db:7d:09:4d:9d:8a:97:9d:2a:fd:48:77:5c:6f:3e:f9:
e8:db:9a:1a:e8:1f:c4:bb:35:82:24:ed:a5:c6:1e:4e:e5:2a:
66:44:8d:a9:53:c2:2e:cd:dc:af:ef:1f:19:9f:26:69:6b:df:
1f:54:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:33 2026 by rpki-client